Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

QUERY_USERS is a privileged permission

Browse Source 
Unlike MANAGE_USERS, the weaker QUERY_USERS was not marked as a
privileged permission, making it (ironically) harder to get. To
encourage apps for which the weaker permission suffices to use that
weaker permission instead, we change it to privileged.

Bug: 272303195
Test: builds and boots
Test: atest IntentResolverUnitTests (invokes a test app that uses this
permission)

Change-Id: I289023f3007fe1a06c3ed517c397e5b57068b468
This commit is contained in:
Adam Bookatz
2023-03-08 11:06:17 -08:00
parent 3521df06db
commit 42882cc86c
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/res/AndroidManifest.xml
View File

@@ -3159,7 +3159,7 @@
<!-- @SystemApi @hide Allows an application to call APIs that allow it to query users on the
device. -->
<permission android:name="android.permission.QUERY_USERS"
android:protectionLevel="signature|role" />
android:protectionLevel="signature|privileged|role" />
<!-- Allows an application to access data blobs across users. -->
<permission android:name="android.permission.ACCESS_BLOBS_ACROSS_USERS"

1
data/etc/privapp-permissions-platform.xml
View File

@@ -275,6 +275,7 @@ applications that come with the platform
<!-- Permission required to test onPermissionsChangedListener -->
<permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
<permission name="android.permission.INTERACT_ACROSS_USERS"/>
<permission name="android.permission.QUERY_USERS"/>
<permission name="android.permission.LOCAL_MAC_ADDRESS"/>
<permission name="android.permission.MANAGE_ACCESSIBILITY"/>
<permission name="android.permission.MANAGE_DEVICE_ADMINS"/>